CVE record · 1 source
CVE-2026-114637
CVSS 8.7Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connection pool, which fails to pin…
- Vendor
- Microsoft
- Product
- Active Directory / Entra ID, Squid / HAProxy / Varnish
- CVSS
- 8.7
- EPSS
- 0.003 (p21)
- Exposure class
- Identity, Edge / VPN / firewall
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connection pool, which fails to pin…
Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connection pool, which fails to pin NTLM/Negotiate-authenticated backend connections to their frontend connection.…